Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/96a6a8-fb81-4a0f-ab83-a299b022d84e/1/JBDk0RglFcR982oQAbf2geLc9BQ.mft
File: JBDk0RglFcR982oQAbf2geLc9BQ.mft (raw, json)
Hash identifier: QA94jju2TkyBnTfnUdTN3hHwFMGt7tBas6oB46LQA+A=
Subject key identifier: C6:E5:EB:10:36:78:54:16:79:42:5B:B0:04:B5:D8:19:9E:C5:C3:F3
Authority key identifier: 24:10:E4:D1:18:25:15:C4:7D:F3:6A:10:01:B7:F6:81:E2:DC:F4:14
Certificate issuer: /CN=2410e4d1182515c47df36a1001b7f681e2dcf414
Certificate serial: 0199FD3452454844A5EC3B54D6ECC07B04B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JBDk0RglFcR982oQAbf2geLc9BQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/96a6a8-fb81-4a0f-ab83-a299b022d84e/1/JBDk0RglFcR982oQAbf2geLc9BQ.mft
Manifest number: 1199
Signing time: Sun 19 Oct 2025 16:01:28 +0000
Manifest this update: Sun 19 Oct 2025 16:01:28 +0000
Manifest next update: Mon 20 Oct 2025 16:01:28 +0000
Files and hashes: 1: As6vwkWGZxruqh4uQQnrE0_5Wkc.roa (hash: +uKniDECqLf36Ns+Ibc2IgSroQKNM4uwIuCwreWx2Qo=)
2: JBDk0RglFcR982oQAbf2geLc9BQ.crl (hash: tWeu+SHssmvOBvA4QOjojmqBAHvxm+Rn2+EZ+L+iDoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/96a6a8-fb81-4a0f-ab83-a299b022d84e/1/JBDk0RglFcR982oQAbf2geLc9BQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/96a6a8-fb81-4a0f-ab83-a299b022d84e/1/JBDk0RglFcR982oQAbf2geLc9BQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JBDk0RglFcR982oQAbf2geLc9BQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:52:45:48:44:a5:ec:3b:54:d6:ec:c0:7b:04:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2410e4d1182515c47df36a1001b7f681e2dcf414
Validity
Not Before: Oct 19 16:01:28 2025 GMT
Not After : Oct 20 16:01:28 2025 GMT
Subject: CN=c6e5eb103678541679425bb004b5d8199ec5c3f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:84:db:7e:f6:7c:2f:3b:75:c6:5a:0d:2b:09:
eb:de:7a:9e:cf:31:9f:f6:c9:1c:d4:a7:96:2e:3f:
27:91:76:be:d0:73:16:c8:ea:80:19:33:4c:e1:de:
c8:71:1e:dc:fb:a0:32:6a:c9:28:e7:c8:09:ee:c3:
3c:78:22:01:b8:1f:8a:ef:3b:71:b8:0d:cd:5d:8f:
28:4a:f5:5f:47:2a:d8:70:19:6e:da:c2:18:97:76:
b7:05:42:cd:01:3e:83:b8:02:03:08:42:f2:91:dd:
16:d1:b5:3a:39:cc:a7:aa:18:c8:03:3d:40:9f:ee:
9e:5d:c9:47:c6:dc:ff:3c:af:0e:2c:ba:9c:ea:4a:
63:04:29:39:a9:1c:1e:7a:5a:05:50:36:8a:1c:18:
1a:80:1f:c5:ae:e4:1f:c4:4a:cb:8d:5b:20:a3:74:
3a:ce:da:d0:a7:ae:6b:cf:0a:28:42:b2:d3:98:a1:
63:fa:60:db:79:8d:20:55:d2:f8:da:5b:58:98:21:
d8:54:ee:db:1c:c1:85:db:5c:4b:9d:be:71:40:95:
61:7c:24:38:c1:0e:8f:96:41:a2:c1:db:29:4c:9c:
b1:cb:1d:4e:1f:c7:72:dc:cd:d6:ec:61:63:04:d2:
2e:cc:b1:16:e4:09:7a:75:98:ef:01:59:4e:27:d2:
b6:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:E5:EB:10:36:78:54:16:79:42:5B:B0:04:B5:D8:19:9E:C5:C3:F3
X509v3 Authority Key Identifier:
keyid:24:10:E4:D1:18:25:15:C4:7D:F3:6A:10:01:B7:F6:81:E2:DC:F4:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JBDk0RglFcR982oQAbf2geLc9BQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/96a6a8-fb81-4a0f-ab83-a299b022d84e/1/JBDk0RglFcR982oQAbf2geLc9BQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/96a6a8-fb81-4a0f-ab83-a299b022d84e/1/JBDk0RglFcR982oQAbf2geLc9BQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e1:06:b6:58:eb:88:dd:02:75:e1:cd:af:79:6d:a6:34:d4:d5:
c4:cb:81:b2:7c:5a:b3:17:96:7f:1c:1c:dd:f0:58:b7:f4:a9:
41:fe:2e:c4:65:2f:7c:14:65:88:c1:b4:5f:e4:81:79:52:02:
17:84:8c:50:70:54:eb:7b:ba:16:b2:e7:6d:81:83:df:a5:eb:
f9:0c:0d:9f:de:a1:8c:08:f5:22:b1:64:09:5f:b8:c7:2f:0b:
0b:91:c2:0d:3f:2d:18:09:9e:71:69:d9:b8:bf:07:83:02:a3:
14:c5:e7:db:d4:40:f4:96:48:46:40:de:10:51:0a:86:9b:df:
47:4b:78:c0:82:be:59:8d:31:49:0b:4d:26:f8:07:15:d9:28:
e1:60:e2:10:e4:ac:a2:b3:e1:64:24:45:b1:3c:31:3c:4d:ac:
0f:f9:1f:2f:fa:e3:52:c0:60:2f:61:02:8b:f8:cf:26:45:ee:
ca:d3:b2:44:b1:4c:15:bb:52:7c:b2:76:6b:d0:7a:90:55:7b:
19:df:2d:bb:c8:73:d9:d1:50:3e:af:8f:d7:e3:48:43:5d:bd:
81:1d:ac:42:08:96:b2:59:1f:fd:7c:61:ac:fa:a8:ed:72:61:
09:b4:15:86:54:01:26:b4:24:c3:69:be:d5:91:c0:44:33:d7:
49:2f:3f:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9NFJFSESl7DtU1uzAewS0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0MTBlNGQxMTgyNTE1YzQ3ZGYzNmExMDAxYjdmNjgxZTJk
Y2Y0MTQwHhcNMjUxMDE5MTYwMTI4WhcNMjUxMDIwMTYwMTI4WjAzMTEwLwYDVQQD
EyhjNmU1ZWIxMDM2Nzg1NDE2Nzk0MjViYjAwNGI1ZDgxOTllYzVjM2YzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYTbfvZ8Lzt1xloNKwnr3nqezzGf
9skc1KeWLj8nkXa+0HMWyOqAGTNM4d7IcR7c+6Ayasko58gJ7sM8eCIBuB+K7ztx
uA3NXY8oSvVfRyrYcBlu2sIYl3a3BULNAT6DuAIDCELykd0W0bU6OcynqhjIAz1A
n+6eXclHxtz/PK8OLLqc6kpjBCk5qRweeloFUDaKHBgagB/FruQfxErLjVsgo3Q6
ztrQp65rzwooQrLTmKFj+mDbeY0gVdL42ltYmCHYVO7bHMGF21xLnb5xQJVhfCQ4
wQ6PlkGiwdspTJyxyx1OH8dy3M3W7GFjBNIuzLEW5Al6dZjvAVlOJ9K2mwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMbl6xA2eFQWeUJbsAS12BmexcPzMB8GA1UdIwQY
MBaAFCQQ5NEYJRXEffNqEAG39oHi3PQUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkJEazBSZ2xGY1I5ODJvUUFiZjJnZUxjOUJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy85NmE2YTgtZmI4MS00YTBmLWFiODMt
YTI5OWIwMjJkODRlLzEvSkJEazBSZ2xGY1I5ODJvUUFiZjJnZUxjOUJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy85NmE2YTgtZmI4MS00YTBmLWFiODMtYTI5OWIwMjJkODRl
LzEvSkJEazBSZ2xGY1I5ODJvUUFiZjJnZUxjOUJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4Qa2WOuI
3QJ14c2veW2mNNTVxMuBsnxasxeWfxwc3fBYt/SpQf4uxGUvfBRliMG0X+SBeVIC
F4SMUHBU63u6FrLnbYGD36Xr+QwNn96hjAj1IrFkCV+4xy8LC5HCDT8tGAmecWnZ
uL8HgwKjFMXn29RA9JZIRkDeEFEKhpvfR0t4wIK+WY0xSQtNJvgHFdko4WDiEOSs
orPhZCRFsTwxPE2sD/kfL/rjUsBgL2ECi/jPJkXuytOyRLFMFbtSfLJ2a9B6kFV7
Gd8tu8hz2dFQPq+P1+NIQ129gR2sQgiWslkf/XxhrPqo7XJhCbQVhlQBJrQkw2m+
1ZHARDPXSS8/9A==
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:51:54 2025 by rpki-client